Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/ABD5003E079C11EBA7C04832C4F9AE02.roa
File:                     ABD5003E079C11EBA7C04832C4F9AE02.roa (raw, json)
Hash identifier:          gudUHLzJpmvIi7qROWYt11jIMMWxAxmreMkdOGwLNhI=
Subject key identifier:   A4:6C:51:37:1B:3D:64:ED:A3:38:F4:10:C0:5B:11:90:E2:A5:8A:74
Certificate issuer:       /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
Certificate serial:       07DF
Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/ABD5003E079C11EBA7C04832C4F9AE02.roa
Signing time:             Thu 02 Oct 2025 21:22:51 +0000
ROA not before:           Thu 02 Oct 2025 21:22:51 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     38880
IP address blocks:        103.195.207.0/24 maxlen: 24
                          2001:df6:2400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl
                          rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2015 (0x7df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
        Validity
            Not Before: Oct  2 21:22:51 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68deed2b-c2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:de:1f:3b:bc:3c:c9:8f:6c:10:87:cb:ec:
                    c1:09:4d:46:f4:dc:b1:eb:91:55:a1:3d:5a:a9:7e:
                    b9:b3:c7:de:c9:6a:20:85:5a:26:b9:53:fd:a9:c6:
                    f6:05:4c:c5:42:d5:61:41:36:9b:58:6c:f7:65:45:
                    a6:e8:3f:e2:97:84:7d:c8:9d:95:2c:86:93:97:aa:
                    06:eb:3e:12:a2:53:7b:11:dc:5c:29:04:d8:4d:34:
                    47:cc:b1:db:4b:69:60:7e:63:f6:1b:ba:d2:91:5d:
                    e7:aa:18:a1:6b:c2:60:a2:c7:bd:26:22:19:63:65:
                    27:6a:27:47:0f:07:60:b1:aa:61:e6:5b:61:31:1b:
                    2b:c3:58:73:7b:71:7e:66:3d:15:89:24:9b:6e:53:
                    f0:50:3e:fd:d6:70:11:01:99:08:09:d5:71:c6:cf:
                    96:f9:03:97:df:51:18:7c:3a:55:fd:c2:c7:6e:68:
                    59:2b:8b:5f:55:f1:b4:91:1e:66:e9:27:55:94:76:
                    75:d2:84:e6:f7:76:b1:94:82:d8:b3:07:0b:63:5b:
                    96:d2:b4:4d:45:0f:4f:ee:fe:fb:02:17:af:fd:01:
                    ae:3c:8b:14:bc:fc:7f:93:19:50:b9:6f:25:b6:75:
                    2b:69:ec:89:b7:ac:c6:68:a9:58:1c:0d:65:fb:b1:
                    e4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6C:51:37:1B:3D:64:ED:A3:38:F4:10:C0:5B:11:90:E2:A5:8A:74
            X509v3 Authority Key Identifier:
                keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/ABD5003E079C11EBA7C04832C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.207.0/24
                IPv6:
                  2001:df6:2400::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:80:20:bc:a8:3a:3a:10:e0:71:83:87:d2:70:3e:16:b9:4d:
         ef:fe:5b:09:eb:d1:85:b2:ab:03:c0:01:0f:17:86:f3:47:1b:
         ef:92:9d:10:92:e1:aa:86:00:8d:6a:93:b5:fc:6a:7b:16:35:
         58:d6:22:16:e6:15:8a:25:fb:74:d4:33:19:0e:94:69:ff:92:
         11:29:d7:2a:64:c2:5b:3d:e7:59:c4:13:00:54:9e:4e:89:87:
         3c:12:e9:1a:51:e0:b9:ee:90:53:5f:09:53:a4:06:03:e5:1e:
         d9:d3:e1:3d:63:2e:95:0d:4b:3e:2b:2b:79:7a:7c:93:2a:2b:
         dd:46:85:21:24:cc:ca:ee:62:e7:7d:6e:9d:7d:3d:0f:a2:35:
         19:08:05:b6:ff:37:4b:92:b2:d5:63:aa:86:bc:70:f4:d8:51:
         17:64:de:43:3b:fb:f4:c4:20:97:31:51:42:65:0c:97:ec:c5:
         c5:8b:55:a2:0e:d6:71:02:d9:70:f2:a8:27:cb:69:94:4f:71:
         31:d3:de:80:ca:73:0b:e1:29:b1:c2:a4:f8:01:53:b0:0e:67:
         75:80:7e:dc:3f:46:c2:d6:0f:3d:19:30:9d:30:60:09:75:9d:
         32:f5:ef:a4:d1:30:37:c7:f0:72:af:51:76:f2:b9:18:b4:5a:
         60:73:fd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:28:07 2025 by rpki-client